3 ms·

You can always trust State Bank of India to pick the worst possible process and phrase. WTF is hacking characters ?

• Gaelan 7y ago
  Presumably something like “;<>. Characters that get used in XSS/SQLI. Totally the wrong defense, of course
  • _hyn3 7y ago
    Please don't put anything in here that might harm us, because we're inserting these characters directly into our totally secure password database, which also happens to contain all of your biometrics. We use firewalls and lots of red tape, so it's all very safe.
• jldugger 7y ago
  > WTF is hacking characters Basically anything a scripting programming language might use as a comment or sigil. Putting 'we are probably calling exec() on your password' into writing though is a boneheaded move.
  • keanebean86 7y ago
    Maybe they run a password report and someone had <script>alert("lol");</script> as a password. Managment freaked out and demanded someone fix the hack.
    • _hyn3 7y ago
      Printing out people's unhashed passwords? Not cool.
      • winrid 7y ago
        How else will you make sure they're not entering their SSN? :)
• deleted 7y ago
  [deleted]